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DETAILED ACTION 

This action is in response to Applicant's RCE filed on 1 1/05/2008. Independent 
claims 1 and 7 have been amended. Claims 12 and 13 have been cancelled. A 
new dependent claim 17 has been added. Claims 1-11 and 14-17 are now pending 

in the present application. The applicants' amendments to claims are shown in bold 
and italics, and the examiner's response to the amendments is shown in bold in this 
office action. 

Continued Examination Under 37 CFR 1.114 

A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1 .1 7(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1 .17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 
1 1/05/2008 has been entered. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth 
in section 102 of this title, if the differences between the subject matter sought to be patented and the prior 
art are such that the subject matter as a whole would have been obvious at the time the invention was 
made to a person having ordinary skill in the art to which said subject matter pertains. Patentability shall 
not be negatived by the manner in which the invention was made. 
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The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1 , 148 
USPQ 459 (1966), that are applied for establishing a background for determining 
obviousness under 35 U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness 

or nonobviousness. 

Claims 1-11 and 14-16 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Crow et al. (U.S. Patent Application Publication # 2002/0161915 
A1) in view of Ganesan et al. (U.S. Patent Application Publication # 2003/0069973 
A1) and further in view of Varma et al. (U.S. Patent Application Publication # 
2004/0037302 A1) and further in view of Rana et al. (U.S. Patent Application 
Publication # 2002/0095512 A1). 

Consider claim 1, Crow et al. show and disclose a method for receiving a 
plurality of packets from a network and distributing the packets to a plurality of protocol 
processors (Fig.1 , that shows a Border Router 16 receiving a plurality of packets from 
the Internet 22, and distributing the packets to a plurality of protocol processors 24; 
paragraph 0018 discloses the same details) comprising the steps of: 
if a received packet is a fragmented packet, determining whether the received packet is 
a first fragment packet (Flowchart of Fig. 4, blocks 102 and 108 that test for a 
fragmented received packet and then check if it is the first (primary) fragment packet; 
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paragraph 0037, lines 1-5 that disclose testing for a fragmented packet; paragraph 0038 
that discloses a test for the fragmented received packet being the first such packet); 
searching an index indicating one of the protocol processors (Fig. 1, Translation Table 
82 with entries in it; Fig. 3 that shows an entry matching the IP and Transport Header 
information (shown in Fig. 2A) in the primary fragment, after searching the translation 
table 82 for a matching protocol processor); 

entering the index into the corresponding list (Fig. 3, a group of Fragment Contexts 
shown below Fragment Context 92 and representing a list, for the secondary segments 
that were previously stored, being updated with the fragment context of the primary 
fragment; Fig. 4, blocks 114-116; paragraphs 0039-0040 that describe generating a 
fragment-context 92 (shown in Fig. 3) for the identified translation entry and applying it 
to the secondary fragments); and 

attaching the index as a tag to the received packet and transmitting the received packet 
to the corresponding one of the protocol processors (Fig. 4, block 116, paragraph 0039 
that discloses the translation and subsequent transmission process for the primary 
fragment). 

However, Crow et al. do not disclose a method wherein if the received packet is 
the first fragment packet, looking up a tunnel ID of the received packet from a tunnel ID 
look-up table; looking-up a fragment ID of the received packet, and comparing the result 
of the looked-up fragment ID with each list of a fragment look-up table into which the 
results of fragment looked-ups for other received packets are entered, to determine if 
there is a corresponding list; and if the list corresponding to the result of the looked-up 
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fragment ID exists in the fragment look-up table, entering the index into the 
corresponding list of the fragment look-up table, and wherein the other received 
fragment packets are stored in a fragment buffer, wherein a list is stored in the 
fragment look-up table for each of the fragmented packets, wherein, if the 
received fragment packet is determined to be the first fragment packet, searching 
the look-up table for a first list that corresponds to the other received fragment 
packets, wherein the other received fragment packets together with the first 
fragment packet form a datagram, and wherein if the received fragment packet is 
determined to be the first fragment packet and the first list is found in the look-up 
table, editing the list to update the index to be valid and searching the fragment 
buffer for the other received fragment packets and transmitting the found other 
received fragments based on the updated valid index of the first list without 
assembling the fragment packets to form the datagram. 

In the same field of endeavor, Ganesan et al. disclose a method for looking up a 
tunnel ID of the received packet from a tunnel ID look-up table (Flowchart of Fig. 1 1 , 
blocks 1 120 and 1 122; paragraph 0177 which discloses that for received packets, 
based on the tunnel ID of the packet, NAT (Network Address Translation) lookups and 
mappings are applied, thereby disclosing looking up a tunnel ID of the received packet 
from a tunnel ID look-up table). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to provide a method for looking up a tunnel ID of the 
received packet from a tunnel ID look-up table, as taught by Ganesan et al., in the 
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method of Crow et al., so that encapsulated received packets can be securely delivered 
through the firewall of the receiving node. 

However, Crow et al., as modified by Ganesan et al., do not specifically disclose 
a method wherein if the received packet is the first fragment packet, looking-up a 
fragment ID of the received packet, and comparing the result of the looked-up fragment 
ID with each list of a fragment look-up table into which the results of fragment looked- 
ups for other received packets are entered, to determine if there is a corresponding list; 
and if the list corresponding to the result of the looked-up fragment ID exists in the 
fragment look-up table, entering the index into the corresponding list of the fragment 
look-up table, and wherein the other received fragment packets are stored in a 
fragment buffer, wherein a list is stored in the fragment look-up table for each of 
the fragmented packets, wherein, if the received fragment packet is determined to 
be the first fragment packet, searching the look-up table for a first list that 
corresponds to the other received fragment packets, wherein the other received 
fragment packets together with the first fragment packet form a datagram, and 
wherein if the received fragment packet is determined to be the first fragment 
packet and the first list is found in the look-up table, editing the list to update the 
index to be valid and searching the fragment buffer for the other received 
fragment packets and transmitting the found other received fragments based on 
the updated valid index of the first list without assembling the fragment packets 
to form the datagram. 
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In the same field of endeavor, Varma et al. disclose a method wherein if the 
received packet is the first fragment packet, looking-up a fragment ID of the received 
packet, and comparing the result of the looked-up fragment ID with each list of a 
fragment look-up table into which the results of fragment looked-ups for other received 
packets are entered, to determine if there is a corresponding list (Fig. 3; that shows 
Data Memory 210 for storing packets, Control Memory 200 for storing the fragment 
look-up table with head and tail pointers and other data (including packet count) for 
each list, and Link Memory 220 with pointers to keep track of the related packets of the 
list in the data memory; paragraph 0032, lines 6-13 which disclose that a determination 
is made as to whether the received packet is a first block of data associated with this 
queue, that is if the queue was empty upon the arrival of the packet; by checking the 
packet count value for zero. If the packet count value is zero, the head pointer and the 
tail pointer are both set to the address of an allocated block in the data memory to store 
the received packet, as this is the only packet associated with the queue, thus 
disclosing a method wherein if the received packet is the first fragment packet, looking- 
up a fragment ID (queue id) of the received packet, and comparing the result of the 
looked-up fragment ID with each list of a fragment look-up table into which the results of 
fragment looked-ups for other received packets are entered, to determine if there is a 
corresponding list); and 

wherein the other received fragment packets are stored in a fragment buffer (Fig. 
3 that shows Data Memory 210 (fragment buffer) where fragment packets received 
out-of-order are stored; paragraph 0030 discloses the same details), 
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wherein a list is stored in the fragment look-up table for each of the fragmented 
packets (Fig. 3 that further shows a link memory 220 (fragment look-up table) that 
stores a list of pointers that locate different fragments or packets of a message 
stored in the Data Memory 210; paragraph 0030 discloses the same details), 
wherein, if the received fragment packet is determined to be the first fragment 
packet (Fig. 3 that also shows a Control Memory 200, each row of which 
corresponds to a single or multi-packet message stored in the Data Memory 210, 
the row including the head and tail pointer of the queue of packets for a message 
and other fields for storing packet count and status of the queue processing, the 
head pointer pointing to the first received packet, which will be the first packet of 
the message when all the packets have been received and stored; paragraphs 
0030-0031 disclose the details shown), 

searching the look-up table for a first list that corresponds to the other received 
fragment packets (Fig. 3 which shows that starting with a message ID (that 
corresponds to the row in the Control Memory), the head pointer (set to 21) is 
used to index in the Data Memory (at row 21) to locate the content of the first 
packet (e.g. packet 1), and also used to index in the Link Memory to find the 
pointer (34) for the next packet (e.g. packet 2); this next packet pointer can then 
be similarly used to locate the packet data for the next packet (e.g. packet 2) in 
the Data Memory (at row 34) and a pointer (67) to a subsequent packet (e.g. 
packet 3) in the Link Memory at row 34, repeating the process until a null (empty) 
value for a pointer is reached in the Link Memory, indicating the last packet; 
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paragraphs 0030-0031 describe the functioning of the linked-list disclosed and 
shown in Fig. 3), 

wherein the other received fragment packets together with the first fragment 
packet form a datagram (paragraph 0030 which discloses that if more than one 
block is required to store the data for a particular queue, the data is stored in a 
plurality of blocks), and 

wherein if the received fragment packet is determined to be the first fragment 
packet and the first list is found in the look-up table, editing the list to update the 
index to be valid and searching the fragment buffer for the other received 
fragment packets and transmitting the found other received fragments based on 
the updated valid index of the first list without assembling the fragment packets 
to form the datagram (this claimed feature is an inherent design detail of a linked- 
list, wherein as the packets in a message are received, they are stored in the next 
available row in the Data Memory (i.e. in non-contiguous blocks), and the pointer 
values in the corresponding rows in the Link Memory are updated; after all the 
packets have been received, the packets stored in the Data Memory may be 
transmitted without reassembling them again by simply tracing their pointers, 
starting with the head pointer for the message stored in the Control Memory). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to provide a method wherein if the received packet is 
the first fragment packet, looking-up a fragment ID of the received packet, and 
comparing the result of the looked-up fragment ID with each list of a fragment look-up 
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table into which the results of fragment looked-ups for other received packets are 
entered, to determine if there is a corresponding list, and wherein the other received 
fragment packets are stored in a fragment buffer, wherein a list is stored in the fragment 
look-up table for each of the fragmented packets, wherein, if the received fragment 
packet is determined to be the first fragment packet, searching the look-up table for a 
first list that corresponds to the other received fragment packets, wherein the other 
received fragment packets together with the first fragment packet form a datagram, and 
wherein if the received fragment packet is determined to be the first fragment packet 
and the first list is found in the look-up table, editing the list to update the index to be 
valid and searching the fragment buffer for the other received fragment packets and 
transmitting the found other received fragments based on the updated valid index of the 
first list without assembling the fragment packets to form the datagram, as taught by 
Varma et al., in the method of Crow et al., as modified by Ganesan et al., so that the 
related packets received in the out of order sequence, may be organized in a single list 
for subsequent translation and transmission to a common destination host/port. 

However, Crow et al., as modified by Ganesan et al. and Varma et al., do not 
specifically disclose a method wherein if the list corresponding to the result of the 
looked-up fragment ID exists in the fragment look-up table, entering the index into the 
corresponding list of the fragment look-up table. Although Crow et al. do disclose 
creating a fragment context for a primary fragment and associating it with the related 
secondary fragments for subsequent translation and transmission of the related 
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secondary fragments, Crow et al. do not specifically associate it with a list in the 
fragment look-up table. 

In the same field of endeavor, Rana et al. disclose a method wherein if the list 
corresponding to the result of the looked-up fragment ID exists in the fragment look-up 
table, entering the index into the corresponding list of the fragment look-up table (Fig. 1 ; 
paragraph 0023 that discloses analyzing packet header to determine whether a data 
packet is a fragment; and if the data packet is a fragment from a known session (i.e. 
belonging to an existing link list, as discussed in paragraphs 0020-0023), a fragment id 
is associated with the data packet, thus disclosing a method wherein if the list 
corresponding to the result of the looked-up fragment ID exists in the fragment look-up 
table, entering the index into the corresponding list of the fragment look-up table). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to provide a method wherein if the list corresponding to 
the result of the looked-up fragment ID exists in the fragment look-up table, entering the 
index into the corresponding list of the fragment look-up table, as taught by Rana et al., 
in the method of Crow et al., as modified by Ganesan et al. and Varma et al., so that the 
related packets received in the out of order sequence, may be organized in a single list 
for subsequent translation and transmission to a common destination host/port. 

Consider claim 2, and as it applies to claim 1 above, Crow et al., as modified 
by Ganesan et al., Varma et al., and Rana et al., further show and disclose a method, 
wherein the step of entering the index into the corresponding list of the fragment look-up 
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table, includes newly entering the result of the looked-up fragment ID and the index into 
the fragment look-up table, if the list corresponding to the result of the looked-up 
fragment ID does not exist in the fragment look-up table (in Varma et al. reference, 
paragraph 0032, lines 6-13 which disclose that a determination is made as to whether 
the received packet is a first block of data associated with this queue, that is if the 
queue was empty upon the arrival of the data; by checking the packet count value for 
zero. If the count value is zero, the head pointer and the tail pointer are both set to the 
address of an allocated block in the data memory to store the received packet, as this is 
the only packet associated with the queue, thereby disclosing creating a new list with 
the fragment id (queue id), if the list corresponding to the result of the looked-up 
fragment ID does not exist in the fragment look-up table); (in Crow et al. reference, Fig. 
3 that shows a sample address translation entry; Flowchart of Fig. 4, blocks 110-114; 
paragraph 0040 that discloses the process of generating an index (fragment-context 92 
shown in Fig. 3) for the identified translation entry 90, thereby disclosing generating an 
index); and (in Rana et al. reference, Fig. 1; paragraph 0023 that discloses analyzing 
packet header to determine whether a data packet is a fragment; and if the data packet 
is a new fragment, in which case a fragment id (index) is assigned to the data packet); 
together disclosing a method wherein the step of entering the index into the 
corresponding list of the fragment look-up table, includes newly entering the result of the 
looked-up fragment ID and the index into the fragment look-up table, if the list 
corresponding to the result of the looked-up fragment ID does not exist in the fragment 
look-up table). 
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Consider claim 3, and as it applies to claim 1 above, Crow et al., as modified 
by Ganesan et al., Varma et al., and Rana et al., further show and disclose the claimed 
method, wherein the step of transmitting the received packet includes attaching the 
index as the tag to a packet that has been previously received and stored in a fragment 
buffer and transmitting the previously received and stored packet to the corresponding 
one of the protocol processors, if the received packet is the first fragment and the list 
corresponding to the result of the looked-up fragment exists in the fragment look-up 
table (in Varma et al. reference, paragraph 0032, lines 13-20 which disclose that a 
determination is made as to whether the packet count value is zero. If the count value 
is not zero, the queue already exists, thus disclosing an existing queue for the received 
packet); (in Crow et al. reference, Fig. 3 that shows a sample address translation entry 
for a first fragment; Flowchart of Fig. 4, blocks 110-114; paragraphs 0039-0041 that 
disclose the process of generating an index for a primary fragment (fragment-context 92 
shown in Fig. 3) for the identified translation entry 90, so that the primary and the 
related secondary fragments may be translated and transmitted to their destination 
host/port); and (in Rana et al. reference, Fig. 1; paragraph 0023 that discloses analyzing 
packet header to determine whether a data packet is a fragment; and if the data packet 
is a fragment from a known session (i.e. belonging to an existing list as disclosed in 
paragraphs 0020-0023), a fragment id is associated with the data packet, thus 
disclosing a method wherein the step of transmitting the received packet includes 
attaching the index as the tag to a packet that has been previously received and stored 
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in a fragment buffer and transmitting the previously received and stored packet to the 
corresponding one of the protocol processors, if the received packet is the first fragment 
and the list corresponding to the result of the looked-up fragment exists in the fragment 
look-up table). 

Consider claim 4, and as it applies to claim 1 above, Crow et al., as modified 
by Ganesan et al., Varma et al., and Rana et al., further show and disclose the claimed 
method, wherein if the received packet is not the first fragment (in Crow et al. reference, 
Flowchart of Fig. 4, blocks 108, 118, 120; paragraph 0042, lines 1-4 that disclose the 
processing of a received packet that is not the first fragment), further comprising the 
steps of: 

looking-up the fragment ID of the received packet and comparing the result of the 
looked-up fragment ID with each list of the fragment look-up table, to determine if there 
is a corresponding list; entering the result of the fragment ID looked-up for the received 
packet into the fragment look-up table, if the list corresponding to the result of the 
looked-up fragment does not exist in the fragment look-up table; and storing the 
received packet in a fragment buffer (in Varma et al. reference, paragraph 0032, lines 6- 
13 which disclose that a determination is made as to whether the received packet is a 
first block of data associated with this queue, that is if the queue was empty upon the 
arrival of the packet; this is achieved by checking packet count value for zero. If the 
count value is zero, the head pointer and the tail pointer are both set to the address of 
an allocated block in the data memory to store the received packet, as this is the only 
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packet associated with the queue, thus disclosing a method wherein if the received 
packet is not the first fragment packet, looking-up a fragment ID of the received packet, 
and comparing the result of the looked-up fragment ID with each list of a fragment look- 
up table into which the results of fragment looked-ups for other received packets are 
entered, to determine if there is a corresponding list, and entering the result of the 
fragment ID looked-up for the received packet into the fragment look-up table, if the list 
corresponding to the result of the looked-up fragment does not exist in the fragment 
look-up table; and storing the received packet in a fragment buffer); 

Consider claim 5, and as it applies to claim 4 above, Crow et al., as modified 
by Ganesan et al., Varma et al., and Rana et al., show and disclose a method of the 
claimed invention, wherein if the list corresponding to the result of the looked-up 
fragment ID exists in the fragment look-up table (in Varma et al. reference, paragraph 
0032, lines 13-20 which disclose that a determination is made as to whether the packet 
count value is zero. If the count value is not zero, the queue already exists, thus 
disclosing an existing queue for the received packet), further comprising the steps of: 
determining whether the index corresponding to the result of the tunnel ID look-up exists 
in the corresponding list (in Ganesan et al. reference, Flowchart of Fig. 1 1 , blocks 1 120 
and 1 122; paragraph 0177 which discloses that for received packets, based on the 
tunnel ID of the packet, NAT (Network Address Translation) lookups and mappings are 
applied, thereby disclosing looking up a tunnel ID of the received packet from a tunnel 
ID look-up table); and 
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attaching the index as the tag to the received packet and transmitting the received 
packet to the corresponding one of the protocol processors, if the index exists in the 
corresponding list (in Crow et al. reference, Fig. 4, block 116, paragraph 0039 that 
discloses the translation and subsequent transmission process for the primary fragment; 
Flowchart of Fig. 4, block 124; paragraph 0043, lines 7-13 which disclose that the 
secondary fragment is translated using the identified entry 90 and transmitted to one of 
the protocol processors); and (in Rana et al. reference, Fig. 1; paragraph 0023 that 
discloses analyzing packet header to determine whether a data packet is a fragment; 
and if the data packet is a fragment from a known session (i.e. belonging to an existing 
list as disclosed in paragraphs 0020-0023), a fragment id is associated with the data 
packet, thus if the list corresponding to the result of the looked-up fragment ID exists in 
the fragment look-up table, entering the index into the corresponding list of the fragment 
look-up table, so as to be able to attach the index as a tag to the received packet and 
transmit the received packet to the corresponding one of the protocol processors, if the 
index exists in the corresponding list). 

Consider claim 6, and as it applies to claim 5 above, Crow et al., as modified 
by Ganesan et al., Varma et al., and Rana et al., further show and disclose the claimed 
method, comprising the step of storing the received packet in the fragment buffer, if the 
index does not exist in the corresponding list (in Varma et al. reference, paragraph 
0032, lines 13-20 which disclose that a determination is made as to whether the packet 
count value is zero. If the count value is not zero, the queue already exists; the value of 
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the current tail link for the queue is modified to point to a newly allocated block in data 
memory to store the received packet); and (in Crow et al. reference, Flowchart of Fig. 4, 
blocks 108 and 120; paragraph 0042, lines 14-17 which disclose that the secondary 
fragment 34 is stored in the fragment memory 84, if a fragment-context 92 does not 
exist for the secondary fragment 34 in the translation table 82). 

Consider claim 7, Crow et al. show and disclose an apparatus for distributing a 
plurality of packets to a plurality of protocol processors (Fig.1 , that shows a Border 
Router 16 receiving a plurality of packets from the Internet 22, and distributing the 
packets to a plurality of protocol processors 24; paragraph 0018 discloses the same 
details) comprising: 

a dependant interface for transmitting the packet attached with the index to the 
corresponding one of the protocol processors (In Fig. 1, shown by the left link 20 
between the Border Router 16 and Protocol Processor Hosts 24; Fig. 3 that shows a 
fragment context (an index) attached to the translated packet entry for transmission to 
its destination host/port). 

However, Crow et al. do not explicitly disclose an apparatus comprising a 
receiving unit for receiving the packets from a network; a fragment look-up table storage 
unit for storing fragment look-up table into which the result of a fragment looked-up on 
the received packet is entered; a fragment look-up device for comparing the result of the 
fragment looked-up on the received packet with each list of the fragment look-up table, 
to determine whether the list corresponding to the result exists; a tunnel ID look-up table 
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storage unit for storing a tunnel ID look-up table having lists of indexes indicating the 
protocol processors corresponding to the tunnel IDs of the packets, respectively; and a 
tunnel ID look-up device for searching the index corresponding to the result of the 
tunnel ID looked-up on the received packet from the tunnel ID look-up table to attach 
the index as a tag to the received packet; and a fragment buffer storing the other 
received fragment packets, wherein a list is stored in the fragment look-up table 
storage unit for each of the fragmented packets, wherein, if the received fragment 
packet is determined to be the first fragment packet by the fragment look-up 
device, searching the look-up table for a first list that corresponds to the other 
received fragment packets, wherein the other received fragment packets together 
with the first fragment packet form a datagram, and wherein if the received 
fragment packet is determined to be the first fragment packet by the fragment 
look-up device and the first list is found in the look-up table, editing the list to 
update the index to be valid and searching the fragment buffer for the other 
received fragment packets and transmitting the found other received fragments 
based on the updated valid index of the first list without assembling the fragment 
packets to form the datagram. 

In the same field of endeavor, Rana et al. disclose an apparatus comprising a 
receiving unit for receiving the packets from a network (Fig. 1, Input 12 and Input 
Interface 14 forming a receiving unit for receiving the packets from a network; 
paragraph 0019 that discloses the same details). 
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Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to provide an apparatus comprising a receiving unit for 
receiving the packets from a network, as taught by Rana et al., in the apparatus of Crow 
et al., so that the input packets can be received by the apparatus. 

However, Crow et al., as modified by Rana et al., do not explicitly disclose an 
apparatus comprising a fragment look-up table storage unit for storing fragment look-up 
table into which the result of a fragment looked-up on the received packet is entered; a 
fragment look-up device for comparing the result of the fragment looked-up on the 
received packet with each list of the fragment look-up table, to determine whether the 
list corresponding to the result exists; a tunnel ID look-up table storage unit for storing a 
tunnel ID look-up table having lists of indexes indicating the protocol processors 
corresponding to the tunnel IDs of the packets, respectively; and a tunnel ID look-up 
device for searching the index corresponding to the result of the tunnel ID looked-up on 
the received packet from the tunnel ID look-up table to attach the index as a tag to the 
received packet; and a fragment buffer storing the other received fragment 
packets, wherein a list is stored in the fragment look-up table storage unit for 
each of the fragmented packets, wherein, if the received fragment packet is 
determined to be the first fragment packet by the fragment look-up device, 
searching the look-up table for a first list that corresponds to the other received 
fragment packets, wherein the other received fragment packets together with the 
first fragment packet form a datagram, and wherein if the received fragment 
packet is determined to be the first fragment packet by the fragment look-up 
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device and the first list is found in the look-up table, editing the list to update the 
index to be valid and searching the fragment buffer for the other received 
fragment packets and transmitting the found other received fragments based on 
the updated valid index of the first list without assembling the fragment packets 
to form the datagram. 

In the same field of endeavor, Varma et al. disclose an apparatus comprising a 
fragment look-up table storage unit for storing fragment look-up table into which the 
result of a fragment looked-up on the received packet is entered (Fig. 3, Control 
Memory 200 used for storing fragment look-up table with a plurality of lists within it, 
each list represented by a head pointer, a tail pointer and a packet count value, the lists 
storing fragment id (queue id) value of received fragmented packets stored in the data 
memory 210 and referenced by the link memory 220); and a fragment look-up device for 
comparing the result of the fragment looked-up on the received packet with each list of 
the fragment look-up table, to determine whether the list corresponding to the result 
exists (paragraph 0032 which discloses a queue processor that creates a new list and 
stores the received packet data each time a first new packet is received and for every 
subsequent packet received, compares the queue id of the incoming packet with the 
queues already in the control memory to place the incoming packet in the existing 
queue); and 

a fragment buffer storing the other received fragment packets (Fig. 3 that shows 
Data Memory 210 (fragment buffer) where fragment packets received out-of-order 
are stored; paragraph 0030 discloses the same details), 
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wherein a list is stored in the fragment look-up table storage unit for each of the 
fragmented packets (Fig. 3 that further shows a link memory 220 (fragment look- 
up table) that stores a list of pointers that locate different fragments or packets of 
a message stored in the Data Memory 210; paragraph 0030 discloses the same 
details), 

wherein, if the received fragment packet is determined to be the first fragment 
packet by the fragment look-up device (Fig. 3 that also shows a Control Memory 
200, each row of which corresponds to a single or multi-packet message stored in 
the Data Memory 210, the row including the head and tail pointer of the queue of 
packets for a message and other fields for storing packet count and status of the 
queue processing, the head pointer pointing to the first received packet, which 
will be the first packet of the message when all the packets have been received 
and stored; paragraphs 0030-0031 disclose the details shown), 
searching the look-up table for a first list that corresponds to the other received 
fragment packets (Fig. 3 which shows that starting with a message ID (that 
corresponds to the row in the Control Memory), the head pointer (set to 21) is 
used to index in the Data Memory (at row 21) to locate the content of the first 
packet (e.g. packet 1), and also used to index in the Link Memory to find the 
pointer (34) for the next packet (e.g. packet 2); this next packet pointer can then 
be similarly used to locate the packet data for the next packet (e.g. packet 2) in 
the Data Memory (at row 34) and a pointer (67) to a subsequent packet (e.g. 
packet 3) in the Link Memory at row 34, repeating the process until a null (empty) 
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value for a pointer is reached in the Link Memory, indicating the last packet; 
paragraphs 0030-0031 describe the functioning of the linked-list disclosed and 
shown in Fig. 3), 

wherein the other received fragment packets together with the first fragment 
packet form a datagram (paragraph 0030 which discloses that if more than one 
block is required to store the data for a particular queue, the data is stored in a 
plurality of blocks), and 

wherein if the received fragment packet is determined to be the first fragment 
packet by the fragment look-up device and the first list is found in the look-up 
table, editing the list to update the index to be valid and searching the fragment 
buffer for the other received fragment packets and transmitting the found other 
received fragments based on the updated valid index of the first list without 
assembling the fragment packets to form the datagram (this claimed feature is an 
inherent design detail of a linked-list, wherein as the packets in a message are 
received, they are stored in the next available row in the Data Memory (i.e. in non- 
contiguous blocks), and the pointer values in the corresponding rows in the Link 
Memory are updated; after all the packets have been received, the packets stored 
in the Data Memory may be transmitted without reassembling them again by 
simply tracing their pointers, starting with the head pointer for the message 
stored in the Control Memory). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to provide an apparatus comprising a fragment look-up 
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table storage unit for storing fragment look-up table into which the result of a fragment 
looked-up on the received packet is entered; a fragment look-up device for comparing 
the result of the fragment looked-up on the received packet with each list of the 
fragment look-up table, to determine whether the list corresponding to the result exists, 
and a fragment buffer storing the other received fragment packets, wherein a list is 
stored in the fragment look-up table storage unit for each of the fragmented packets, 
wherein, if the received fragment packet is determined to be the first fragment packet by 
the fragment look-up device, searching the look-up table for a first list that corresponds 
to the other received fragment packets, wherein the other received fragment packets 
together with the first fragment packet form a datagram, and wherein if the received 
fragment packet is determined to be the first fragment packet by the fragment look-up 
device and the first list is found in the look-up table, editing the list to update the index to 
be valid and searching the fragment buffer for the other received fragment packets and 
transmitting the found other received fragments based on the updated valid index of the 
first list without assembling the fragment packets to form the datagram, as taught by 
Varma et al., in the apparatus of Crow et al., as modified by Rana et al., so that the 
related packets can be grouped in a common queue (list) for subsequent translation and 
transmission to their destination host/port. 

However, Crow et al., as modified by Rana et al. and Varma et al., do not 
explicitly disclose an apparatus comprising a tunnel ID look-up table storage unit for 
storing a tunnel ID look-up table having lists of indexes indicating the protocol 
processors corresponding to the tunnel IDs of the packets, respectively; and a tunnel ID 
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look-up device for searching the index corresponding to the result of the tunnel ID 
looked-up on the received packet from the tunnel ID look-up table to attach the index as 
a tag to the received packet. 

In the same field of endeavor, Ganesan et al. disclose an apparatus comprising a 
tunnel ID look-up table storage unit for storing a tunnel ID look-up table having lists of 
indexes indicating the protocol processors corresponding to the tunnel IDs of the 
packets, respectively (Figure 6B, remote hash table rhashtbl_t, that includes storage for 
vpnjd which corresponds to tunnel information table); and 

a tunnel ID look-up device for searching the index corresponding to the result of the 
tunnel ID looked-up on the received packet from the tunnel ID look-up table to attach 
the index as a tag to the received packet (Fig. 8, VPN/IKE Module 830 performing the 
function of a tunnel ID look-up device; Flowchart of Fig. 11, blocks 1120 and 1122; 
paragraph 0177 which discloses that for received packets, based on the tunnel ID of the 
packet, NAT (Network Address Translation) lookups and mappings are applied, thereby 
disclosing a tunnel ID look-up device for searching the index corresponding to the result 
of the tunnel ID looked-up on the received packet from the tunnel ID look-up table to 
attach the index as a tag to the received packet). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to provide an apparatus containing a tunnel ID look-up 
table storage unit for storing a tunnel ID look-up table having lists of indexes indicating 
the protocol processors corresponding to the tunnel IDs of the packets, respectively, 
and a tunnel ID look-up device for searching the index corresponding to the result of the 
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tunnel ID looked-up on the received packet from the tunnel ID look-up table to attach 
the index as a tag to the received packet, as taught by Ganesan et al., in the apparatus 
of Crow et al. as modified by Rana et al. and Varma et al., so that encapsulated 
received packets can be securely delivered through the firewall of the receiving node. 

Consider claim 8, and as it applies to claim 7 above, Crow et al., as modified 
by Ganesan et al., Varma et al., and Rana et al., further show and disclose an 
apparatus, wherein if the list corresponding to the result of the looked-up fragment does 
not exist in the fragment look-up table, the fragment look-up device newly enters the 
result of the looked-up fragment and the index into the fragment look-up table, if the 
received packet is a first fragment (in Crow et al. reference, Flowchart of Fig. 4, blocks 
108-11 6; paragraph 0039 that discloses the processing of a received packet that is the 
first fragment); (in Varma et al. reference, paragraph 0032, lines 6-13 which disclose 
that a determination is made as to whether the received packet is a first block of data 
associated with this queue, that is if the queue was empty upon the arrival of the data; 
by checking the packet count value for zero. If the count value is zero, the head pointer 
and the tail pointer are both set to the address of an allocated block in the data memory 
to store the received packet, as this is the only packet associated with the queue, 
thereby disclosing creating a new list with the fragment id (queue id), if the list 
corresponding to the result of the looked-up fragment ID does not exist in the fragment 
look-up table); (in Crow et al. reference, Fig. 3 that shows a sample address translation 
entry; Flowchart of Fig. 4, blocks 110-114; paragraph 0040 that discloses the process of 
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generating an index (fragment-context 92 shown in Fig. 3) for the identified translation 
entry 90, thereby disclosing generating an index); and (in Rana et al. reference, Fig. 1; 
paragraph 0023 that discloses analyzing packet header to determine whether a data 
packet is a fragment; and if the data packet is a new fragment, in which case a fragment 
id (index) is assigned to the data packet and stored in the link list); thus disclosing an 
apparatus wherein if the list corresponding to the result of the looked-up fragment does 
not exist in the fragment look-up table, the fragment look-up device newly enters the 
result of the looked-up fragment and the index into the fragment look-up table, if the 
received packet is a first fragment); and 

newly enters the result of the looked-up fragment into the fragment look-up table, if the 
received packet is not the first fragment (in Crow et al. reference, Flowchart of Fig. 4, 
blocks 108, 118, 120; paragraph 0042, lines 1-4 that disclose the processing of a 
received packet that is not the first fragment); (in Varma et al. reference, paragraph 
0032, lines 6-13 which disclose that a determination is made as to whether the received 
packet is a first block of data associated with this queue, that is if the queue was empty 
upon the arrival of the packet; this is achieved by checking packet count value for zero. 
If the count value is zero, the head pointer and the tail pointer are both set to the 
address of an allocated block in the data memory to store the received packet, as this is 
the only packet associated with the queue, thus disclosing an apparatus wherein if the 
list corresponding to the result of the looked-up fragment does not exist in the fragment 
look-up table, the fragment look-up device newly enters the result of the looked-up 
fragment into the fragment look-up table, if the received packet is not the first fragment). 
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Consider claim 9, and as it applies to claim 7 above, Crow et al., as modified 
by Ganesan et al., Varma et al., and Rana et al., further show and disclose an 
apparatus comprising, if the list corresponding to the result of the looked-up fragment 
and including the index does not exist in the fragment look-up table, a fragment buffer 
for storing the received packet if the received packet is not the first fragment (in Crow et 
al. reference, Flowchart of Fig. 4, blocks 108, 118, 120; paragraph 0042 that discloses 
the processing of a received packet that is not the first fragment); (in Varma et al. 
reference, paragraph 0032, lines 6-13 which disclose that a determination is made as to 
whether the received packet is a first block of data associated with this queue, that is if 
the queue was empty upon the arrival of the packet; this is achieved by checking packet 
count value for zero. If the count value is zero, the head pointer and the tail pointer are 
both set to the address of an allocated block in the data memory to store the received 
packet, as this is the only packet associated with the queue, thus disclosing an 
apparatus wherein if the list corresponding to the result of the looked-up fragment does 
not exist in the fragment look-up table, the fragment look-up device stores the received 
packet in a fragment buffer, if the received packet is not the first fragment). 

Consider claim 10, and as it applies to claim 9 above, Crow et al., as modified 
by Ganesan et al., Varma et al., and Rana et al., further show and disclose an 
apparatus wherein if the list corresponding to the result of the looked-up fragment and 
including the index exists in the fragment look-up table, the fragment look-up device 
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attaches the index as the tag to the received packet to transmit the received packet to 
the corresponding one of the protocol processors (in Varma et al. reference, paragraph 
0032, lines 13-20 which disclose that a determination is made as to whether the packet 
count value is zero. If the count value is not zero, the queue already exists, thus 
disclosing an existing queue for the received packet); (in Crow et al. reference, Fig. 3 
that shows a sample address translation entry for a first fragment; Flowchart of Fig. 4, 
blocks 110-114; paragraphs 0039-0043 that disclose the process of generating an index 
for a primary fragment (fragment-context 92 shown in Fig. 3) for the identified translation 
entry 90, so that the primary and the related secondary fragments may be translated 
and transmitted to their destination host/port); and (in Rana et al. reference, Fig. 1; 
paragraph 0023 that discloses analyzing packet header to determine whether a data 
packet is a fragment; and if the data packet is a fragment from a known session (i.e. 
belonging to an existing list as disclosed in paragraphs 0020-0023), a fragment id is 
associated with the data packet, thus disclosing an apparatus wherein if the list 
corresponding to the result of the looked-up fragment and including the index exists in 
the fragment look-up table, the fragment look-up device attaches the index as the tag to 
the received packet to transmit the received packet to the corresponding one of the 
protocol processors). 

Consider claim 11, and as it applies to claim 9 above, Crow et al., as modified 
by Ganesan et al., Varma et al., and Rana et al., further show and disclose an 
apparatus wherein in the case of the received packet being the first fragment, the 
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fragment look-up device attaches the index as the tag to each packet being a 
subsequent fragment following the first fragment and being stored in the fragment buffer 
to transmit each subsequent fragment packet via the dependant interface to the 
corresponding one of the protocol processors, if the list conforming to the result of the 
looked-up fragment exists in the fragment look-up table (in Varma et al. reference, 
paragraph 0032, lines 13-20 which disclose that a determination is made as to whether 
the packet count value is zero. If the count value is not zero, the queue already exists, 
thus disclosing an existing queue for the received packet); (in Crow et al. reference, Fig. 
3 that shows a sample address translation entry for a first fragment; Flowchart of Fig. 4, 
blocks 110-114; paragraphs 0039-0041 that disclose the process of generating an index 
for a primary fragment (fragment-context 92 shown in Fig. 3) for the identified translation 
entry 90, so that the primary and the related secondary fragments may be translated 
and transmitted to their destination host/port); and (in Rana et al. reference, Fig. 1; 
paragraph 0023 that discloses analyzing packet header to determine whether a data 
packet is a fragment; and if the data packet is a fragment from a known session (i.e. 
belonging to an existing list as disclosed in paragraphs 0020-0023), a fragment id is 
associated with the data packet, thus disclosing an apparatus wherein in the case of the 
received packet being the first fragment, the fragment look-up device attaches the index 
as the tag to each packet being a subsequent fragment following the first fragment and 
being stored in the fragment buffer to transmit each subsequent fragment packet via the 
dependant interface to the corresponding one of the protocol processors, if the list 
conforming to the result of the looked-up fragment exists in the fragment look-up table). 
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Consider claim 14, and as it applies to claim 1 above, Crow et al., as modified 
by Ganesan et al., Varma et al., and Rana et al., disclose the claimed method, wherein, 
if the received fragment packet is determined to be one of the other fragment packets, 
searching the look-up table for the first list, and if the first list is not present, generating 
the first list comprising source address, destination address and an index and storing 
the one of the other fragment packets in the fragment buffer (in Rana et al. reference, 
Fig. 3c that shows the data structure for a link list memory comprising a session id (SID) 
field; paragraph 0037 which discloses that the link list memory 24 (shown in Fig. 1) is 
used to associate the blocks in packet memory 20 that form the PDUs (Packet Data 
Units) from the same session or traffic flow; paragraph 0020 which discloses that the 
link lists in the link list memory 24 are used by the queue engine 10 to track pointers 
associated with data packets stored in packet memory 20; paragraphs 0021-0023 which 
further disclose that a session could be identified and assigned a session id based upon 
the source address, destination address and any other field or combination of fields 
from the header of the data packet which form a unique identifier (corresponding to the 
first list); further disclosing that if the data packet is a fragment from a known session 
(existing first list), a fragment id is associated with the data packet, or if the data packet 
is a new fragment (non-existing first list), a fragment id based on the session id is 
assigned to the data packet). 
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Consider claim 15, and as it applies to claim 14 above, Crow et al., as 
modified by Ganesan et al., Varma et al., and Rana et al., further disclose the claimed 
method, wherein the fragment look-up table further comprises a field indicating storage 
location of respective at least one other fragment packet in the fragment buffer (in Rana 
et al. reference, Fig. 3c, field marked "Next" that indicates storage location of respective 
at least one other fragment packet in the fragment buffer; paragraph 0037 that discloses 
the same details). 

Consider claim 16, and as it applies to claim 1 above, Crow et al., as modified 
by Ganesan et al., Varma et al., and Rana et al., further show and disclose a method 
wherein, if the received packet is the first fragment packet (in Crow et al. reference, 
Flowchart of Fig. 4, blocks 108-11 6; paragraph 0039 that discloses the processing of a 
received packet that is the first fragment), 

searching an index indicating one of the protocol processors (in Crow et al. reference, 
Fig. 3, that shows a searched Address Translation Entry field 90 in the Address 
Translation Table 82 of Fig. 1 , that matches the protocol processor and destination port 
in the IP and Transport Headers of the first fragment shown in Fig. 2A); and 
corresponding to the tunnel ID of the received packet from a tunnel ID look-up table (in 
Ganesan et al. reference, Flowchart of Fig. 11, blocks 1120 and 1122; paragraph 0177 
which discloses that for received packets, based on the tunnel ID of the packet, NAT 
(Network Address Translation) lookups and mappings are applied, thereby disclosing 
looking up a tunnel ID of the received packet from a tunnel ID look-up table), and 
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if the list corresponding to the result of the looked-up fragment ID exists in the fragment 
look-up table (in Varma et al. reference, paragraph 0032, lines 13-20 which disclose 
that a determination is made as to whether the packet count value is zero. If the count 
value is not zero, the queue already exists, thus disclosing an existing queue for the 
received packet), 

updating the index into the corresponding list of the fragment look-up table (in Rana et 
al. reference, Fig. 1 ; paragraph 0023 that discloses analyzing packet header to 
determine whether a data packet is a fragment; and if the data packet is a new 
fragment, in which case a fragment id (index) is assigned to the data packet and stored 
in the link list); and 

transmitting the other received fragment packets stored in a fragment buffer based on 
the updated index stored in the corresponding list of the fragment look up table (in Crow 
et al. reference, Fig. 3, Fragment Context field 92, an index updated in the Address 
Translation Entry field 90 after the first fragment packet is received; paragraphs 0039- 
0041 that disclose generating a fragment-context 92 for the identified translation entry 
90 and associating the corresponding fragment-contexts of the secondary entries with 
that of the first fragment packet, so that the other (secondary) fragment packets 
received prior to the first fragment packet can be appropriately translated and 
transmitted to their destination as well). 

Claim 17 is rejected under 35 U.S.C. 103(a) as being unpatentable over Crow et 
al. (U.S. Patent Application Publication # 2002/0161915 A1) in view of Ganesan et 
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al. (U.S. Patent Application Publication # 2003/0069973 A1) and further in view of 
Varma et al. (U.S. Patent Application Publication # 2004/0037302 A1) and further in 
view of Rana et al. (U.S. Patent Application Publication # 2002/0095512 A1) and 
further in view of Hui et al. (U.S. Patent Application Publication # 2004/0151197 A1). 

Consider claim 17, and as it applies to claim 14 above, Crow et al., as 
modified by Ganesan et al., Varma et al., and Rana et al., further disclose the claimed 
method, wherein if the first fragment packet is not received, the index in the first list that 
corresponds to the other received fragment packets is set to invalid (in Varma et al. 
reference, Fig. 3, field marked "Other Fields" in each row of Control Memory 200; 
paragraph 0031 which discloses that the other fields may include a count of packets, 
and status of the processing for the queue). 

However, Crow et al., as modified by Ganesan et al., Varma et al., and Rana et 
al., do not specifically disclose that the index is set to invalid. 

In the same field of endeavor, Hui discloses the claimed method, including 
setting the index to invalid (paragraph 0017 which discloses that the queuing memory 
has row that each store queuing elements for only one output port, and may include a 
pointer to a linked list of other queuing elements for the flow; further disclosing that each 
queuing element may include a valid flag which is set to valid for a packet in the queue 
and changed to invalid after the queuing element is dequeued). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to set the index in the first list that corresponds to the 
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other received fragment packets to invalid, if the first fragment packet is not received, as 
taught by Hui, in the method of Crow et al., as modified by Ganesan et al., Varma et al., 
and Rana et al., so that messages received with dropped packets may be flushed from 
the buffer memory. 

Response to Arguments 

Applicant's arguments with respect to claims 1-1 1 and 14-17 have been 
considered but are moot in view of the new ground(s) of rejection. 

Conclusion 

Any response to this Office Action should be faxed to (571) 273-8300 or mailed 

to: 

Commissioner for Patents 
P.O. Box 1450 
Alexandria, VA 22313-1450 

Art Unit: 2443 

Hand-delivered responses should be brought to 

Customer Service Window 
Randolph Building 
401 Dulany Street 
Alexandria, VA 22314 

Any inquiry concerning this communication or earlier communications from the 

Examiner should be directed to Kishin G. Belani whose telephone number is (571) 270- 

1768. The Examiner can normally be reached on Monday-Friday from 6:00 am to 5:00 

pm. 
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If attempts to reach the Examiner by telephone are unsuccessful, the Examiner's 
supervisor, Tonia Dollinger can be reached on (571) 272-4170. The fax phone number 
for the organization where this application or proceeding is assigned is (571 ) 273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free) or 703-305-3028. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist/customer service whose telephone 
number is (571)272-0800. 
IK. G. B.I 

Examiner, Art Unit 2443 

January 9, 2009 

/George C. Neurauter, Jr./ 
Primary Examiner, Art Unit 2443 



